Blockchain Node Authentication via Network Delay Measurement
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Blockchain networks face challenges in securing message exchanges among nodes, particularly for devices with limited processing power, as existing authentication protocols are computationally intensive, limiting the participation of devices like IoT sensors and wearables in consensus protocols.
Innovation Solution
A lightweight authentication method using network delays to generate identification factors, allowing devices to authenticate each other based on time intervals between message exchanges, eliminating the need for standard cryptographic primitives after the first cycle.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If standard cryptographic authentication protocols are used to secure message exchanges among blockchain nodes, then security is improved, but computational burden increases making devices with limited processing power unable to participate
Solution Approach 1:
The system performs preliminary authentication during the first consensus cycle by establishing cryptographic credentials and time interval baselines between node pairs. This preliminary action stores authentication data that can be reused in subsequent cycles, eliminating the need for repeated computationally intensive cryptographic operations while maintaining security.
Solution Approach 2:
Instead of performing full cryptographic authentication in every consensus cycle, the system creates simplified copies of authentication credentials (time interval values derived from baseline cryptographic comparison) that can be efficiently exchanged and verified. These copied authentication data structures enable fast verification without repeating the full cryptographic protocol.
2Adaptability or versatility
If lightweight authentication protocols are used to enable devices with limited processing power to participate, then device accessibility is improved, but authentication security may be compromised
Solution Approach 1:
Strong cryptographic authentication is performed once in advance during the first consensus cycle to establish trusted credentials. This preliminary strong authentication ensures security while allowing lightweight operations in subsequent cycles, making the system both secure and accessible to resource-constrained devices.
Solution Approach 2:
The system introduces time interval values as intermediary authentication tokens between full cryptographic protocols and simple device operations. These intermediaries are computationally light to process but are derived from and tied to strong cryptographic credentials, providing both security and accessibility.
3Reliability
If cryptographic primitives are used in every consensus cycle for authentication, then authentication reliability is improved, but processing time and energy consumption increase
Solution Approach 1:
The system implements periodic full cryptographic authentication only during the first consensus cycle, then switches to periodic lightweight verification using pre-established credentials for subsequent cycles. This periodic pattern maintains authentication reliability while dramatically reducing processing time in ongoing operations.
Solution Approach 2:
Authentication credentials are preliminarily established with full cryptographic rigor before the consensus cycles begin. This preliminary action allows subsequent cycles to use simplified verification procedures, reducing processing time while maintaining the reliability guarantees of the initial strong authentication.
Data Source
Figure 1
Figure 2
Figure 3a
AI summary
A first network device for use in a blockchain network is described. The first network device comprises means for, while carrying out a first iteration of a consensus protocol involving a second node device (103), in response to a trigger event (3040), obtaining a time interval function of a time interval start trigger event (3040) and of a time interval end trigger event (3080), each event being linked to a message of the consensus protocol and wherein at least the end trigger event (3080) comprises receiving a message from the second node device; - means for transmitting (3083) first data (Delay_102) representative of said time interval to said second node device; - means for, during a subsequent iteration of said consensus protocol involving said second node device, receiving a message (3140) from said second node device, said message containing second data (DelayTX_102) representative of said time interval from said second node device; - means for authenticating said second node device as a function of said second data. A second network device, methods at the first and second network devices and a computer readable medium with code for carrying out the methods are also described.